Forum Discussion

steve_88008's avatar
steve_88008
Icon for Nimbostratus rankNimbostratus
Sep 04, 2014

Authoritative Screening

i have GTMs set up for authoritative screening for internal DNS queries. clients have the pri and sec dns settings pointing to GTM listeners.   Problem encountered is when a client joins the AD d...
BIG-IP DNS
deployment
steve_88008's avatar
steve_88008
Icon for Nimbostratus rankNimbostratus

i thought that at first as well. I fired up wireshark and reviewed. wireshark showed the response being returned to the client as well.

 

the odd thing is if I back up one level SRV records are returned. its only with there is sub domain.

 

returns SRV records nslookup ->set type=all ->_ldap._tcp.dc._msdcs.abc123.local

 

returns no srv records, nslookup ->set type=all ->_ldap._tcp.dc._msdcs.test.abc123.local

 

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Sep 08, 2014
But these test.abc123.local queries directly against AD are working? When looking at a tcpdump on the GTM, do you notice any difference between responses returned to the client for _ldap._tcp.dc._msdcs.abc123.local vs. _ldap._tcp.dc._msdcs.test.abc123.local?